Which P2PE Program Guide version do I use?
P2PE v2 Program Guide: Used for the assessment and management of P2PE v2 solutions, applications, and components.P2PE v3 Program Guide: Used for the assessment and management of P2PE v3 …
Recent FAQ Changes RSS
Latest changes to PCI SSC frequently asked questions.
Can PCI-listed P2PE v3 components be used as part of a P2PE v2 solution?
Only the PCI-listed P2PE v3 component types that also exist in P2PE v2 may be used in a P2PE v2 solution assessment, which are:
- Encryption Management
- Decryption …
Can PCI-listed P2PE v2 components be used as part of a P2PE v3 solution?
Yes. P2PE solutions validated to P2PE v3.0 can contain P2PE components and applications validated using P2PE v2.0. Note the P2PE v2 components are governed by the P2PE v2 Program Guide. …
Can PCI-listed P2PE v2.0 applications be used in PCI P2PE v3 solutions/components?
Yes. P2PE applications currently listed as a valid PCI P2PE v2.0 application can be used in a PCI P2PE v3 solution or component and must be included as part of …
Can merchants use encryption solutions not listed on the PCI Council's website to reduce their PCI DSS validation effort?
Yes, however, PCI SSC recommends the use of PCI-listed P2PE solutions. Reference to What effect does the use of a PCI-listed P2PE solution have on a merchant's PCI DSS validation? …
Is the PCI P2PE Standard applicable for merchants that have developed/implemented their own encryption solution?
Yes. Please see the Frequently Asked Questions (FAQ) for Validation Processes for Merchant-Managed Solutions on the PCI SSC website.
In P2PE, how do "hybrid" decryption environments differ from "hardware" decryption environments?
In a hardware decryption environment, all decryption operations are performed only by PCI listed or FIPS approved HSMs.In a hybrid decryption environment, the decryption of account data is performed on …
Who can use SAQ P2PE?
SAQ P2PE is intended for SAQ-eligible merchants or merchant environments (as determined by the individual payment card brands), who process cardholder data only via PCI-approved point of interaction (POI) devices …
Which version of the P2PE Standard should be used for a P2PE assessment?
As of 12 December 2019, the latest version of the P2PE Standard is v3.0
P2PE v2.0 assessments will be accepted by the Council until 30 June 2021.
Currently …
Which PCI PTS point-of-interaction (POI) devices can be used in a validated P2PE solution?
A validated (as per the PCI P2PE Program Guide) P2PE solution/component must use a non-expired PCI-approved point-of-interaction (POI) device, which has been evaluated and approved via the PCI PTS program …